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Amendments to the Claims: 

Claim 1 (Currently Amended): A system for providing controlled access to an object and other 
associated information file by a plurality of users comprising: 

means for establishing an object, the object comprising distinguishable groups of data, 
each group of data having associated access criteria for access to the groups of data; 

a database for storing the object and associated information; 

means for establishing access criteria wherein each group of data has an associated user 
privilege for identifying separate groups of information to which user may have access to the 
groups of data and setting a user's ID including defining which users are allowed to access the 
object and associated information and associated user privileges; 

a central processing unit (CPU) for controlling the access to the database in accordance 

with the access criteria; 

a main memory for storing software code for controlling the operation of the CPU; 

a cache memory for storing user ID's; 

a oachc memory for storing uoer access oriteriaj -and 

access application code stored in the main memory and executable by the CPU, the 
application code being responsive to the user ID and user access criteria associated with the 
groups of data contained within an object and to predetermined privileges for allowing controlled 
access to individual groups of data contained within the object by an individual user according to 
the user's access privileges, thereby transmitting a redacted object to the use r, wherein the 
redacted object, is a redacted document wherein transmitting a redacted object inclu des ponding 
qn olcotronic object to the uocr that contains the groups of information to which the user has 
access to and diat onoludoo groups of information to which tho uoor dooo not have dcoeso 
rnnfidential text that is blocked out. 

Claim 2 (Original): A system according to claim 1, wherein access includes the ability of a user 
to read the contents of the requested object. 

Claim 3 (Original): A system according to claim 2, wherein access includes the ability to modify 
the contents of the requested object. 

Claim 4 (Original): A system according to claim 3, wherein the ability to modify includes the 
ability to delete information contained in the requested object. 
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Claim 5 (Original): A system according to claim 3, wherein the ability to modify includes the 
ability to add data to the requested object. 

Claim 6 (Original): A system according to claim 1 wherein the access is determined by a 
business relationship to produce products and defined by the host according to the need of 
information in the product chain. 

Claim 7 (Currently Amended): A method of controlling access to objects stored in electronic 
form, comprising: 

establishing an object including loading information into the object into separate groups 

having separate privilege access criteria; 

storing the object, the object comprising distinguishable groups of data- 
establishing access criteria, wherein each group of data having an associated-**** 

privilege including identifying separate groups of information to whi c h die uaor may have access 

criteria for access to the groups of data; 

setting a user's ID including defining which users are allowed to access the object and 

associated information and user privileges; 

controlling the access to the database using a central processing unit (CPU) according to 

the access criteria; 

storing software code for controlling the operation of the CPU in main memory; and 
verifying a user's user privil e ge access criteria including extracting the user's user 
identification from the object request, verifying fust in cache memory uud if not in oachc thon in 
main memory the user's user identification and identifying the groups of data to which the user 
has access and privileges with respect thereto thereby allowing controlled access to individual 
groups of data contained within the object by an individual user according to the user's privileges 
in response to the access criteria associated with the groups of data contained within an object 
and to predetermined privileges upon verification of user ID and user privileges, scorching firot 
in cache and if not found in memory then in main memory and retrieving the data requested 
according to the user's access criteria and transmitting a redacted object to the user, wherein the 
reacted ob ject is a rcHnr.tp.ri document whe r ein tmn o mitring a redacted object includon sending 
an electronic object to the uoer that contains the groups of information to which the user has 
access to and that excludes groups of information to which the user docs not have access 
confidential text th at, is blocked out. 
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Claims 8-12 (Canceled) 

Claim 13 (Currently Amended); A computer program product for use with a computer system, a 
central processing unit and means coupled to the central processing unit for Storing a database to 
automatically manage objects for viewing and marking an object having varying formats without 
the use of any originating application of a file to view the object, comprising: 

computer readable code means for establishing an object in a storage location including 
loading information into the object into separate groups having separate privil e g e access criteria; 
storing the object, the object comprising distinguishable groups of data; 
computer readable code means for identifying a user to have access to the object; 
computer readable code means for establishing privilege access criteria that define the 
scope of access of the object for the user whereby each group of data has an associated user 
privilege that define the scope of access of the object for the user; 

computer readable code means for deluding identifying separate groups of information 
to which the user may have access criteria for access to the groups of data; 

computer readable code means for s etting a user's ID including defining which users are 
allowed to access the object and associated information and user privileges; 

computer readable code means for receiving an object request by a user; 
computer readable code means for verifying the user's user privileg e access criteria 
including extracting the user's user identification from the object request, verifying first in cache 
memory and if not in cache th e n in main memory the user's user identification and identifying 
the groups of data to which the user has access and privileges with respect thereto thereby 
allowing controlled access to individual groups of data contained within the object by an 
individual user according to the user's privileges in response to the access criteria associated with 
the groups of data contained within an object and to predetermined privileges upon verification 
of user ID and user privileges , - searching first in oachc and if not found in memory then in main 
memory and retrieving the data requested according to the user's access criteria; and 

computer readable code means for transmitting a redacted document according to the 
user's user privil ege access criteria including sending an electronic object to the user that 
contains the groups of information to which the user has access to and t hat cxcludoo groups of 
informatio n to w tee h the aee? dnn.r . nn t have acoooo confident i al text that is blocked out . 

Claim 14 (Currently Amended): A computer program device, comprising: 

4 
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a computer program storage device readable by a digital processing apparatus; 
a program stored on the program storage device and including instructions executable by 
the digital processing apparatus for controlling the apparatus to perform a method of managing 
documents for viewing and marking an object having varying formats without the use of any 
originating application of a file to view the object stored in the fil & r &omprioing:; 

com puter read^* means for establishing an object in a storage location including 
loading information into the object into separate groups having separate privilege access criteria; 

computer readable code means for storing the object, the object comprising 
distinguishable groups of data; 

computei readahlg rode means for identifying a user to have access to the object; 
conmuter readable code means for establishing privilege access criteria that define the 
scope of access of the object for the user; 

computer readable code means for receiving an object request by a user; 
SOiB ButSe readable code means for v erifying the user's user privilege access criteria 
including extracting the user's uoor identification from the object request, verifying first in each* 
memory and if not in cacho then in main memory the uacr'o uoer identification and identifying 
the groupo of data to which the, user hoo aooeas and privilogco with respect thereto thereby 
allowing controlled aoocoa to individual groupa of data contained within the object by m 
individual uaor according to tho uaor'o privileges in response to the access cri teria aooociatod with 
the groupa of data contained within an objeot and to predetermined privileges upon verification 
of usor ID and uacr privilogoo. searching first in cacho and if not found in memory then in ma te 
memory and retrieving tho data rcquootcd aooording to tho uccr'o acoooa criteria ; and 

computer reacts rode means for transmitting a redacted object, wherein the redacted 
ohiect is a redacted document , aioordinft to tho uoer' a uoer privilege accooo criteria inoluding 
mcano for sending an electronic object to tho uoor that contains the groups of information to 
which the user has access to and that cjicludco groups of information to which tho user dooo not 
b tt «n nrnw.fi confidential text that is blocked out . 

Claim 15 (Currently Amended): In a computer server having a data base for storing data 
pertaining to product information, a method of securely transferring data between a source and 
an access destination comprising: 

establishing an object in a storage location including loading information into the object 
into separate groups having separate privilege access criteria; 
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storing the object, the object comprising distinguishable groups of data, identifying a user 
to have access to the object; 

establishing privilege access criteria wherein each group of data has an associated user 
privilege that define the scope of access of the object for the user; 

inoluding - acpafHKo - group a of - info f mation to which the u3or may have accc33-eri€oria for 
ac& 65fi- t € > - th e- greups - of data; 

setting a user's ID including defining which users are allowed to access the object and 
associated information and user privileges; 

receiving a object request by a user; 

verifying the user's user privilege access criteria including extracting the user's user 
identification from the object request, verifying first in cache memory and if not in cache 
memory then in main memory the user's user identification and identifying the groups of data to 
which the user has access and privileges with respect thereto thereby allowing controlled access 
to individual groups of data contained within the object by an individual user according to the 
user's privileges in response to the access criteria associated with the groups of data contained 
within an object and to predetermined privileges upon verification of user ID and user 
privileges, searching first in cache memory and if not found in cache memory then in main 
memory and retrieving the data requested according to the user's access criteria; and 

transmitting a redacted objec t, wherein the redacted object is a redacted document 
aeeording to the us e r's user privilege access critcaa inoluding sending an electronic object to tho 
user that contains the groups of information to which the user has access to and that oxoludos 
groups of information to which the uaor doo p no t have access confidential text that is blocked 
out 

Claim 16 (Canceled) 
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